Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138362e302f32332d3234203d3e20323637323731.roa
File:                     34352e3233322e3138362e302f32332d3234203d3e20323637323731.roa (raw, json)
Hash identifier:          Y1nxl0INfrFLtmxrp2ox3zU8yvXgb6eSE2meOBLxdvA=
Subject key identifier:   1E:CE:A2:0D:AC:08:4C:76:C9:F8:DE:48:44:58:79:F1:4C:78:12:80
Certificate issuer:       /CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
Certificate serial:       6E218DB842C0445C6402E2CBF626E91ADDE48C4D
Authority key identifier: CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138362e302f32332d3234203d3e20323637323731.roa
Signing time:             Thu 25 Aug 2022 17:54:54 +0000
ROA not before:           Thu 25 Aug 2022 17:49:54 +0000
ROA not after:            Thu 24 Aug 2023 17:54:54 +0000
asID:                     267271
IP address blocks:        45.232.186.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:21:8d:b8:42:c0:44:5c:64:02:e2:cb:f6:26:e9:1a:dd:e4:8c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Validity
            Not Before: Aug 25 17:49:54 2022 GMT
            Not After : Aug 24 17:54:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:db:4c:6c:fc:36:e7:29:0b:27:91:21:93:
                    6e:38:1b:89:63:7f:bf:14:c1:40:7e:8d:35:6b:7e:
                    f9:e0:1c:c3:10:e1:ab:16:4a:5a:ba:a1:45:48:c4:
                    a7:13:39:a0:b3:8e:97:98:c6:96:20:0e:d6:9f:ea:
                    fe:7f:03:28:82:ee:9b:2e:13:f3:0d:86:ae:be:9b:
                    63:5f:c9:8d:0f:ad:1a:2d:39:0c:6f:3b:ab:6d:dd:
                    a1:d8:a8:9f:81:70:a1:4b:01:8b:2c:74:df:bd:44:
                    79:2e:ff:38:e6:ee:cb:22:e6:b0:38:ab:42:4c:3f:
                    30:5f:30:61:28:59:7b:a7:c6:03:e5:9c:ca:b8:4d:
                    45:e8:c7:a4:9c:88:c7:d0:13:a3:aa:87:a7:43:cc:
                    4d:26:30:21:62:9f:a2:b0:fd:a9:90:b9:9a:26:65:
                    fe:3b:a7:fa:3a:47:85:d9:a2:2a:ff:36:78:99:aa:
                    e1:85:80:dd:37:e5:b3:16:a5:e8:2f:a7:11:14:27:
                    53:f6:e6:f9:ec:d9:b4:65:8a:c1:c3:44:a4:d6:c5:
                    fd:83:1b:bb:9a:38:c9:b6:6a:55:f0:25:e5:b2:14:
                    7a:84:91:da:ef:35:4e:65:66:41:1c:49:a2:80:08:
                    d8:eb:a7:fb:60:58:0f:0e:22:5a:d6:5c:56:e8:8b:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CE:A2:0D:AC:08:4C:76:C9:F8:DE:48:44:58:79:F1:4C:78:12:80
            X509v3 Authority Key Identifier:
                keyid:CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138362e302f32332d3234203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:a5:dc:90:bd:9c:36:71:d3:e7:fa:b6:d2:c4:31:ff:ac:
         9a:ad:0c:40:df:92:60:8c:44:7f:0d:a5:1e:9a:53:25:44:f9:
         ba:83:a5:62:8e:94:f0:6b:45:82:40:80:8b:a4:54:c1:d8:f2:
         5e:a9:50:61:42:08:63:bc:05:e7:fc:a1:53:45:6c:ac:b6:a9:
         8c:31:f5:b8:42:d3:09:ca:58:30:87:de:8e:ae:2c:87:4b:31:
         7e:6e:63:af:e1:63:1a:89:46:03:ec:b1:ec:5f:55:b2:e9:ea:
         8c:91:d0:e1:71:ec:13:dc:81:c3:b9:1b:b7:16:e0:eb:0d:8b:
         68:59:fa:e8:70:67:81:ca:ef:57:9e:a4:e8:31:b9:54:56:a3:
         85:0e:72:e6:0d:6e:d0:a4:18:39:45:78:95:31:2d:2b:ee:3e:
         8f:e5:b6:86:af:87:16:76:9e:ee:5f:d5:16:2f:42:fa:2f:96:
         e4:f9:93:60:d8:3f:f1:b0:ae:22:52:be:de:61:2a:3f:50:a1:
         dd:22:81:51:21:ac:41:e4:82:c7:9b:cb:53:f6:80:e7:84:ca:
         f5:51:3c:b0:b8:75:88:49:cb:91:5e:89:58:1d:4e:84:f2:91:
         4d:3c:b4:28:38:a3:cd:47:a7:cf:da:5c:06:08:02:62:f7:9f:
         b6:32:2f:e6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbiGNuELARFxkAuLL9ibpGt3kjE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y3Q0EzQzdGNjQ4NEE4REMyNjg4ODk0RjZENzQwMkVE
NTU4MEJFQjAeFw0yMjA4MjUxNzQ5NTRaFw0yMzA4MjQxNzU0NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUNFNERCNEM2Q0ZDMzZFNzI5
MEIyNzkxMjE5MzZFMzgxQjg5NjM3RkJGMTRDMTQwN0U4RDM1NkI3RUY5RTAxQ0Mz
MTBFMUFCMTY0QTVBQkFBMTQ1NDhDNEE3MTMzOUEwQjM4RTk3OThDNjk2MjAwRUQ2
OUZFQUZFN0YwMzI4ODJFRTlCMkUxM0YzMEQ4NkFFQkU5QjYzNUZDOThEMEZBRDFB
MkQzOTBDNkYzQkFCNkREREExRDhBODlGODE3MEExNEIwMThCMkM3NERGQkQ0NDc5
MkVGRjM4RTZFRUNCMjJFNkIwMzhBQjQyNEMzRjMwNUYzMDYxMjg1OTdCQTdDNjAz
RTU5Q0NBQjg0RDQ1RThDN0E0OUM4OEM3RDAxM0EzQUE4N0E3NDNDQzREMjYzMDIx
NjI5RkEyQjBGREE5OTBCOTlBMjY2NUZFM0JBN0ZBM0E0Nzg1RDlBMjJBRkYzNjc4
OTlBQUUxODU4MEREMzdFNUIzMTZBNUU4MkZBNzExMTQyNzUzRjZFNkY5RUNEOUI0
NjU4QUMxQzM0NEE0RDZDNUZEODMxQkJCOUEzOEM5QjY2QTU1RjAyNUU1QjIxNDdB
ODQ5MURBRUYzNTRFNjU2NjQxMUM0OUEyODAwOEQ4RUJBN0ZCNjA1ODBGMEUyMjVB
RDY1QzU2RTg4QjZEQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArOTbTGz8NucpCyeRIZNuOBuJY3+/FMFAfo01a3754BzDEOGrFkpa
uqFFSMSnEzmgs46XmMaWIA7Wn+r+fwMogu6bLhPzDYauvptjX8mND60aLTkMbzur
bd2h2KifgXChSwGLLHTfvUR5Lv845u7LIuawOKtCTD8wXzBhKFl7p8YD5ZzKuE1F
6MeknIjH0BOjqoenQ8xNJjAhYp+isP2pkLmaJmX+O6f6OkeF2aIq/zZ4marhhYDd
N+WzFqXoL6cRFCdT9ub57Nm0ZYrBw0Sk1sX9gxu7mjjJtmpV8CXlshR6hJHa7zVO
ZWZBHEmigAjY66f7YFgPDiJa1lxW6IttsQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FB7Oog2sCEx2yfjeSERYefFMeBKAMB8GA1UdIwQYMBaAFM98o8f2SEqNwmiIlPbX
QC7VWAvrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZxdHo1UFRVWUNkcXdK
NUNBSHJ1WVFpTjI2QURzVWplSkN4ZE43QXBTakV0LzAvQ0Y3Q0EzQzdGNjQ4NEE4
REMyNjg4ODk0RjZENzQwMkVENTU4MEJFQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRjdDQTNDN0Y2NDg0QThEQzI2ODg4OTRGNkQ3NDAyRUQ1NTgw
QkVCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcXR6NVBUVVlDZHF3SjVDQUhy
dVlRaU4yNkFEc1VqZUpDeGRON0FwU2pFdC8wLzM0MzUyZTMyMzMzMjJlMzEzODM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM3MzIzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Lei6MA0GCSqGSIb3DQEBCwUAA4IBAQAct6XckL2cNnHT5/q20sQx/6yarQxA35Jg
jER/DaUemlMlRPm6g6VijpTwa0WCQICLpFTB2PJeqVBhQghjvAXn/KFTRWystqmM
MfW4QtMJylgwh96OriyHSzF+bmOv4WMaiUYD7LHsX1Wy6eqMkdDhcewT3IHDuRu3
FuDrDYtoWfrocGeByu9XnqToMblUVqOFDnLmDW7QpBg5RXiVMS0r7j6P5baGr4cW
dp7uX9UWL0L6L5bk+ZNg2D/xsK4iUr7eYSo/UKHdIoFRIaxB5ILHm8tT9oDnhMr1
UTywuHWIScuRXolYHU6E8pFNPLQoOKPNR6fP2lwGCAJi95+2Mi/m
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org